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Top Stories 

• U.S. Federal and State officials imposed penalties against Deutsche Bank AG, including a 
$258 million fine and the termination of 6 employees for their roles in knowingly 
conducting more than $10.86 billion in transactions with nations blacklisted by the U.S. 
government. - USA Today (See item 5) 

• Classes at the University of California, Merced were cancelled November 5 following a 
November 4 incident where an individual stabbed two students, a staff member, and a 
contract employee. - CNN (See item 18 ) 

• Officials are investigating November 4 the cause of a norovirus outbreak that sickened over 
100 students, teachers, and staff members at O’FIara Catholic School in Oregon following a 
pumpkin carving party. - Reuters (See item 21 ) 

• Fire crews spent 8 hours battling a November 3 fire at the 60,000-square-foot Healthy Pet 
cat litter warehouse in Femdale, Washington, which prompted an evacuation of the 
building and caused at least $1 million in damage. - Associated Press (See item 27 ) 
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Energy Sector 



1. November 5, LaSalle News Tribune - (Illinois) State fines owners of Peru gas station 
more than $500,000. A dissolved Illinois corporation, Alpine International, Inc., and a 
defendant were levied fines totaling $556,500 November 4 due to the defendants’ 
failure to remove abandoned underground petroleum storage tanks, and several other 
violations of the Gasoline Storage Act at a closed Marathon gas station in LaSalle 
County. 

Source: 

http://newstrib.com/main.asp?SectionID=2&SubSectionID=27&ArticleID=47572 

2. November 3, Utica Observer-Dispatch - (New York) Statewide crackdown 
underway on gas pump card reader fraud. The governor of New York announced 
November 3 that the New York State Department of Agriculture and Markets’ Weight 
and Measures Bureau will conduct the State’s first-ever training and inspection of gas 
station dispensers as part of a statewide effort to crack down on illegal credit and debit 
card skimmers at gas pumps in order to protect consumers and gas station owners. 
Source: http://www.uticaod.com/article/20151103/NEWS/151109806 

Chemical Industry Sector 

Nothing to report 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 

Critical Manufacturing Sector 

3. November 3, U.S. Department of Labor - (Ohio) Worker injured when lK-pound 
load falls from crane. For the second time in a year, the U.S. Department of Labor 
issued 21 safety violations following an October 30 investigation of 2 TimkenSteel 
Corp. plants in Canton, Ohio, after a worker was hit by 1,000 pounds of equipment due 
to a failed safety latch. TimkenSteel faces $393,500 in fines and will be placed in the 
agency’s Severe Violator Enforcement Program. 

Source: https://www.osha.gov/newsrelease/reg5-20151103.html 

Defense Industrial Base Sector 

Nothing to report 

Financial Services Sector 

4. November 5, Reuters - (National) 2-ex-N.Y. fed employee pleads guilty over 
Goldman leaks. A former Federal Reserve of New York employee pleaded guilty 
November 4 to stealing confidential information and providing it to a colleague at 
Goldman Sachs Group Inc., who allegedly shared it with other Goldman employees. 
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Source: http://in.reuters.eom/article/2015/l 1/04/goldman-sachs-fed-crime- 
idlNL INI 2Z2LA20 151104 



5. November 4, USA Today - (International) Deutsche Bank hit with $258M penalty for 
sanctions violations. U.S. Federal and State officials imposed penalties against 
Deutsche Bank AG, including a $258 million fine and the termination of 6 employees 
for their roles in knowingly conducting more than $10.86 billion in transactions with 
nations blacklisted by the U.S. government, including Iran, Libya, Burma, and Syria 
between 1999 and 2006 after investigators uncovered email evidence of improper 
conduct. 

Source: http://www.usatodav.com/storv/monev/2015/ll/04/deutsche-bank-sanctions- 
penalty/7 5 1 64432/ 

6. November 3, Reuters - (National) Fenway Partners, four executives, to pay $10.2 
million for disclosure lapses: SEC. U.S. securities regulators announced November 3 
that New York-based Fenway Partners LLC and 4 of its executives will pay $10.2 
million to settle allegations that the firm failed to notify clients and investors that a 
subsidiary private equity fund paid more than $20 million to its employees. The 
company did not admit any wrongdoing in the settlement. 

Source: http ://w ww .reuters . com/article/20 15/11 /03/us-sec-fenway- 
idUSKCN0SS2262015 1 103#TMYtEdPB8ytRrDY0.97 

Transportation Systems Sector 

7. November 5, Minneapolis Star Tribune - (Minnesota) Fuel leak closes westbound 
Hwy. 12 near Long Lake. The westbound lanes of Highway 12 in western Hennepin 
County is expected to be closed for approximately 4 hours November 5 while crews 
cleaned up a diesel fuel spill. 

Source: http://www.startribune.com/fuel-leak-closes-hwy-12-near-long- 
lake/340869691/ 

8. November 5, WNEP 16 Scranton - (Pennsylvania) 1-380 south back open after two 
tractor- trailers collide. Both lanes of Interstate 380 in Coolbaugh Township was shut 
down for almost 3 hours November 5 while crews cleaned up merchandise that spilled 
after two semi-trucks collided and injured one person. 

Source: http://wnep.com/2015/ll/05/two-tractor-trailers-collide-part-of-highwav-shut- 
down/ 

9. November 4 , KHON 2 Honolulu - (Hawaii) Kalanianaole Hwy. westbound reopened 
after deadly moped crash. The westbound lanes of Kalanianaole Highway in Aina 
Haina were shut down for about 2 hours November 4 while officials investigated the 
cause of a crash that killed one person. 

Source: http://khon2.eom/2015/l 1/04/kalanianaole-hwy-westbound-reopened-after- 
deadly-moped-crash/ 

10. November 4, Long Island Newsday - (New York) 1 hurt as truck overturns in Bay 
Shore; westbound Sunrise Highway reopens, police say. Westbound Sunrise 
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Highway in Bay Shore reopened November 4 after being shut down for about 5 hours 
while officials investigate a two-vehicle accident that critically injured one person. 
Source: http://www.newsday.com/long-island/suffolk/police-l-hurt-as-truck-overturns- 
in-bay-shore-westbound-sunrise-highway-shut- 1.1 1057335 

11. November 4, KSL 1160 AM Salt Lake City - (Utah) 10-car crash in Emery County 
temporarily closes freeway. Interstate 70 in Green River was shut down for over 2 
hours November 4 while officials investigated the cause of a 10- vehicle accident that 
injured 3 people. The cause of the accident is believed to be due to light snow and sleet 
on the roadway. 

Source: http://www.ksl.com/?sid=37236478&nid=148&title=10-car-crash-in-emery- 
county-temporarilv-closes-freewav&s cid=queue-4 

Food and Agriculture Sector 

12. November 5, Seattle Times - (Oregon; Washington) Chipotle E. coli cases continue to 
rise in Washington. Health officials in Washington reported November 4 that the 
number of people infected by E. coli 026 bacteria after eating at Chipotle Restaurants 
Inc., restaurants has risen to 29 in the State, and dropped from 12 to 10 in Oregon. 
Authorities continue to investigate the outbreak to determine the source of the bacteria. 
Source: http://www.seattletimes.com/seattle-news/health/chipotle-e-coli-cases- 
continue-to-rise-in-washington/ 

13. November 4, U.S. Food and Drug Administration - (National) Tate’s Bake Shop 
issues allergy alert on undeclared walnut allergy in Tate’s 7 oz Chocolate Chip 
Cookies and Tate’s 7 oz Ginger Zinger Cookies. Southampton, New York-based 
Tate’s Bake Shop issued a nationwide recall November 4 for its 7 ounce Chocolate 
Chip and 7 ounce Ginger Zinger cookies due to misbranding and undeclared walnuts. 
Source: http://www.fda.gov/Safety/Recalls/ucm471226.htm 

14. November 4, Sacramento Bee - (California) E. coli confirmed in Apple Hill ranch 
juice. El Dorado County health officials reported November 4 the presence of E. coli 
bacteria in a lot of unpasteurized apple juice from High Hill Ranch in Camino after 
several customers became ill. High Hill Ranch issued a voluntary product recall in 
October after authorities discovered a tainted batch of unpasteurized apple juice. 
Source: http ://www.s acbee . com/new s/loc al/article4297 1571 .html 

For another story, see item 21 

Water and Wastewater Systems Sector 

15. November 4, WFAA 8 Dallas - (Texas) 1.8 million gallons of sewage spill into 
Mansfield Creek. Crews in Mansfield worked to repair a 30-inch sewer line break that 
spilled 1.8 million gallons of sewage into the Walnut Creek following recent heavy 
rains November 4. 

Source: http://www.wfaa.com/storv/news/local/2015/ll/04/18-million-gallons-sewage- 
spill-into-mansfield-creek/7 5 177994/ 
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Healthcare and Public Health Sector 



16. November 5, Pittsburgh Tribune -Review - (Pennsylvania) Painkiller mix-up at Butler 
Memorial Hospital puts patients in ‘immediate jeopardy.’ Officials at Butler 
Memorial Hospital in Pennsylvania filed a plan of correction following an incident that 
occurred between August 24 and 31 where a patient was accidentally given 18 doses of 
the painkiller Dilaudid after staff mistakenly placed prefilled syringes of the painkiller 
in a dispenser partially filled with morphine sulfate. The hospital reported the incident 
to the State and the patient was unharmed. 

Source: http://triblive.com/news/healthnews/9380184-74/hospital-errors-patients 

17. November 4, Brattleboro Reformer - (New Hampshire) Cheshire Medical fined 
$200K for hazmat violations. The New Hampshire attorney general and the 
commissioner of the New Hampshire Department of Environmental Services 
announced November 4 that a judge approved a consent decree between the State and 
Cheshire Medical Center in Keene resolving alleged violations of the Hazardous Waste 
Management Act after the medical center failed to identify certain pharmaceutical 
wastes as hazardous wastes, and shipped the wastes to unauthorized facilities. The 
medical center self-corrected the violations and agreed to pay $200,000 in fines. 

Source: http://www.reformer.com/latestnews/ci 29069976/cheshire-medical-fined- 
200k-hazmat- violations 



Government Facilities Sector 

18. November 5, CNN - (California) Student fatally shot after stabbing 4 at UC Merced. 

Classes at the University of California, Merced were cancelled November 5 following a 
November 4 incident where an individual stabbed two students, a staff member, and a 
contract employee before fleeing the building from police and succumbing to injuries 
following an officer- involved shooting. 

Source: http://www.cnn.com/2015/ll/04/us/university-califomia-merced- 
stabbings/index .html 

19. November 5, KFVS 12 Cape Girardeau - (Illinois) Maple Grove Elementary closed 
for possible gas leak. A potential gas leak and water issues prompted the cancellation 
of classes and closure of Maple Grove Elementary and Joppa Junior/Senior High 
School in Joppa November 5. 

Source: http://www.kfvsl2.com/story/30444296/maple-grove-elementarv-closed-for- 
possible-gas-leak 

20. November 5, WPMI 15 Mobile - (Alabama) Accident between school bus and SUV 
leaves one seriously injured. Three students, one adult, and a driver were injured in an 
accident between a school bus and vehicle on the Dauphin Island Parkway in Mobile 
November 5. 

Source: http://www.wltz.com/storv/30443177/accident-between-school-bus-and-suv- 
leaves-one-seriously-injured 

21. November 4, Reuters - (Oregon) Oregon school pumpkin carving party suspected in 
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norovirus outbreak. Officials are investigating November 4 the cause of a norovirus 
outbreak that sickened over 100 students, teachers, and staff members at O’Hara 
Catholic School in Eugene following a pre-Halloween pumpkin carving party, which 
also forced the school to cancel classes for 3 days while workers disinfected the 
building. 

Source: http://www.reuters.com/article/2015/ll/Q5/us-oregon-norovirus- 
idUSKCN0SU06Y20151105 

Emergency Services Sector 

Nothing to report 

Information Technology Sector 

22. November 5, Securityweek - (International) Cisco patches serious flaws in security, 
wireless appliances. Cisco released software updates patching several critical and high 
severity vulnerabilities including a command injection vulnerability, CVE-2015-6298 
that affects the certificate generation process in the interface of the Cisco Web Security 
Appliance (WSA), denial-of- service (DoS) vulnerabilities that causes affected devices 
to run out of system memory, and vulnerabilities in the Mobility Service Engine that 
allows unauthenticated attackers to remotely log in to the platform via a user account 
protected by a default and static password, among other updates. 

Source: http://www.securitvweek.com/cisco-patches-serious-flaws-securitv-wireless- 
appliances 

23. November 5, Securityweek - (International) Multi-platform RAT OmniRAT used to 
hijack devices. Researchers from Avast reported that OmniRAT, a multi-platform 
remote administration tool (RAT) was being distributed and used by cybercriminals as 
a remote access trojan through social engineering in which victims would receive 
malicious short message service (SMS) with a shortened link, that if clicked, would 
load an icon labeled “MMS Retrieve,” allowing attackers to install the malware. 

Source: http://www.securitvweek.com/multi-platform-rat-omnirat-used-hiiack-devices 

24. November 4, Softpedia - (International) Hackers cleverly hide backdoor inside the 
EXIF Data of a Joomla CMS logo. Security researchers from Sucuri, a company 
specializing in providing security solutions for Web site owners, discovered a backdoor 
encoded in the Joomla CMS logo image in its base64 that was added to the copyright 
field of image, inside its exchangeable image file format (EXIF) metadata header. The 
image was previously displayed via the application. php file, allowing hackers to 
modify the line of code to execute the backdoor on infected sites without distorting the 
final image. 

Source: http://news.softpedia.com/news/hackers-cleverly-hide-backdoor-inside-the- 
exif-data-of-a-ioomla-cms-logo-495741.shtml 

25. November 4, Securityweek - (International) Backdoored ad library found in 
thousands of iOS apps. Researchers at FireEye discovered 17 different versions of a 
backdoor malware similar to mobiSage software development kit (SDK), dubbed 
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iBackDoor, in applications of popular ad libraries including 2,846 Apple’s mobile 
operating system (iOS) that allows attackers to potentially carry out a range of tasks 
including manipulating files in the app’s data container, uploading encrypted data to a 
remote server, and monitoring device location, among other tasks. 

Source: http://www.securitvweek.com/backdoored-ad-librarv-found-thousands-ios- 
apps 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



Communications Sector 

See item 28 

Commercial Facilities Sector 

26. November 5, Associated Press - (Wisconsin) Ohio man charged with Wisconsin 
church fire. Ashland officials reported that an Ohio man was charged of arson for a 
hate crime and criminal damage November 5 after allegedly damaging and setting the 
Salem Baptist Church ablaze October 31. 

Source: http://www.channel3000.com/news/ohio-man-charged-with-wisconsin-church- 
fire/36274516 

27. November 5, Associated Press - (Washington) Firefighters battle blaze at cat litter 
plant in Ferndale. Fire crews spent 8 hours battling a November 3 fire at the 60,000- 
square-foot Healthy Pet cat litter warehouse in Ferndale, which prompted an evacuation 
of the building and caused at least $1 million in damage. 

Source: http ://www .theolympian.com/ne ws/state/washington/ article43 125525 .html 

28. November 4, KGTV 10 San Diego - (California) Residence Inn in downtown San 
Diego evacuates after underground electrical explosion. Officials reported 
November 4 that the Residence Inn in San Diego was evacuated after an underground 
electrical vault exploded following a faulty electrical wiring that caused an area power 
outage. SDG&E reported 889 customers were without power and nearby hotels were 
evacuated due to the incident. 

Source: http://www.10news.com/news/marriott-hotel-in-downtown-san-diego- 
evacuates-after-underground-electrical-explosion 

Dams Sector 



Nothing to report 
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NTAS 



NO ACTIVE ALERTS 
wwvv.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support@govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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